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Abstract 



■ Deep holes play an important role in the decoding of generalized 

■ Reed-Solomon codes. Recently, Wu and Hong [11] found a new class of 
| deep holes for standard Reed-Solomon codes. In the present paper, we 

give a concise method to obtain a new class of deep holes for generalized 



^ ■ Reed-Solomon codes. In particular, for standard Reed-Solomon codes, 

. we get the new class of deep holes given in [11] . 

Li and Wan [6] studied deep holes of generalized Reed-Solomon 
codes GRSk{¥ q , D) and characterized deep holes defined by polynomi- 
als of degree k + 1. They showed that this problem is reduced to be a 
subset sum problem in finite fields. Using the method of Li and Wan, 
we obtain some new deep holes for special Reed-Solomon codes over 
finite fields with even characteristic. Furthermore, we study deep holes 
of the extended Reed-Solomon code, i.e., D = ¥ q and show polynomials 
of degree k + 2 can not define deep holes. 

keywords: coding theory, Reed-Solomon codes, list decoding, deep 
holes, multiplicative character, quadratic equation. 

1 Introduction 

Let ¥ q be the finite field of q elements with characteristic p. Fix a subset 
D = {xi, . . . ,x n } C F q , which is called the evaluation set. The generalized 
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Reed-Solomon code C = GRSk(¥ q , D) of length n and dimension k over ¥ q is 
defined to be 

GRS k (¥ q , D) = {(/(a*), . . . , f{x n )) G ¥ n q \f(x) G ¥ q [x], degf(x) <k — l}. 

Its elements are called codewords. The most widely used cases are D = ¥ q or 
F*. For the case D = ¥*, it is just the standard Reed-Solomon code. For the 
case D = ¥ q , it is the extended Reed-Solomon code. 

For any word « e F^, by the Lagrange interpolation, there is a polynomial 
/ of degree ^ n — 1 such that 

U = U f = (/(Xi), f(x 2 ), • ■ ■ , /O n )). 

Clearly, Uf G GRSk(¥ q , D) if and only if deg(/) ^ k — 1. We also say that u/ 
is defined by the polynomial f(x). 

Let C be an [n, fc, d] linear code over ¥ q . The error distance of any word 
u G F" to C is defined to be 

d(u, C) = mxn{d(u, v) \ v G C}. 

where 

G?(w, t>) = #{i | Ui 7^ f j, 1 ^ i ^ n} 

is the Hamming distance between words u and v. The error distance play an 
important role in the list decoding of Reed-Solomon codes. Given a received 
word u G Fg , if the error distance is small, say, d(u, C) < n — ynk, then 
the list decoding algorithm of Sudan [TU] and Guruswami-Sudan [4J provides 
a polynomial time algorithm for the decoding of u. When the error distance 
increases, the maximal likelihood decoding becomes more complicated, in fact, 
NP-complete for generalized Reed-Solomon codes [5]. 

The most important algorithmic problem in coding theory is the maximal 
likelihood decoding: given a word u G F™, find a codeword v G C such 
that d(u, v) = d{u,C). The decision version of this problem is essentially 
computing the error distance d(u, C) for a received word u. For the generalized 
Reed-Solomon codes GRSk(¥ q , D), the following result is well-known. 

Lemma 1.1 ([B]). For any k ^ deg(/) ^ n — 1, we have 

n — deg(f) ^ d(uf, C) < n — k. 

In particular, the word u is called a deep hole if the above upper bound is 
attained, i.e., d(u,C) = n — k. Following Lemma we see that the vectors 
defined by polynomials of degree k are deep holes. 

For the standard Reed-Solomon code GRSk(¥ q ,¥*), based on numerical 
computations, Cheng and Murray [2] conjectured that vectors defined by poly- 
nomials of degree k are the only deep holes possible. As a theoretical evidence, 
they proved that their conjecture is true for words Uf defined by polynomial 
/ if d = deg(wj) — A; is small and q is sufficiently large compared to d + k. For 
those words defined by polynomials in ¥ q [x] of low degrees, Li and Wan [S] ap- 
plied the method of Cheng and Wan [3] to study the error distance d(u, C) for 
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the standard Reed- Solomon code. Liao [9] extended the results in [8] to those 
words defined by polynomials in ¥ q [x] of high degrees. Recently, by means of 
a deeper study of the geometry of hypersurfaces, Cafure and et al. [lj made 
some improvement of the results in [8]. 

Recently, Wu and Hong [TTJ found a new class of deep holes for stan- 
dard Reed-Solomon codes. They considered the standard Reed-Solomon code 
GRSk(¥ q ,W*) as a cyclic code with the generator polynomial 

g(x) = (x — a)(x — a 2 ) • ■ ■ (x — a n ~ k ), 

where a is a primitive element of ¥ q . They found two classes of deep holes, 
namely a^-+l(x)g(x) and a x ^}_ k +l(x)g(x) for any a G F* and l(x) G ¥ q [x] 
with deg(7(x)) ^ k — 1. After the inverse discrete Fourier transform, the latter 
is just the trivial ones defined by polynomials of degree k, but the former is 
new. The new deep holes are of the form ux q ~ 2 + l(x) for any « ^ and 
l(x) G ¥ q [x] with deg(/(x)) ^ k — 1. And then they conjectured that there are 
no more deep holes for standard Reed-Solomon codes. 

In Section 2, we study deep holes of generalized Reed-Solomon codes. 
Using a simple method, we give a new class of deep holes for any generalized 
Reed-Solomon code in the case D ^ ¥ q . In Section 3, using the explicit 
formula given in [8], we obtain new deep holes for special Reed-Solomon codes 
over finite fields with even characteristic, which are not contained in the two 
classes of deep holes given in Section 2. In Section 4, we study deep holes 
of extended Reed-Solomon codes, and characterize the deep holes defined by 
polynomials of degree k + 2. We show that the existence of these deep holes is 
equivalent to non-existence of solutions for a class of quadratic equations. We 
prove the quadratic equation always has solutions. Then there are no deep 
holes defined by polynomials of degree k + 2. 

2 A New class of Deep Holes for Generalized 
Reed-Solomon Codes 

In this section, we consider generalized Reed-Solomon codes GRSk(¥ q , D) over 
the finite field ¥ q . We give a new class of deep holes for GRSk(¥ q , D) besides 
the trivial ones defined by the polynomials of degree k. 

In the case that D = ¥*, i.e., standard Reed-Solomon codes, Wu and Hong 
considered them as cyclic codes and gave a new class of deep holes defined 
by polynomials / = ax q ~~ 2 + f^k-i(%) (a 7^ 0) where f^k-i(x) represents the 
terms of degree ^ k — 1 in the polynomial /. But for the general valuation 
set D 7^ F* the generalized Reed-Solomon code GRSk(¥ q , D) can not be 
considered as a cyclic code, so their method is invalid. Below we give a simple 
method to show that for any b ^ D, these words defined by polynomials 
/ = a(x — b) q ~ 2 + f<^k-i(x) (a ^ 0) are still deep holes for generalized Reed- 
Solomon codes GRSk(¥ q , D). 

First, we give the key lemma. 
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Lemma 2.1. Let ¥ q be a finite field with q elements and ¥ q [x] the ring of 
polynomials over ¥ q . For any D Q ¥ q , any b ^ D, and any polynomial (x — 
b) q ~ 2 — g(x) G ¥ q [x] with deg(g(x)) ^ k — 1, a 6 D is a zero of (x — b) q ~ 2 — g(x) 
if and only if a is a zero ofl — (x — b)g(x). So the polynomial (x — b) q ~ 2 —g{x) 
has at most k zeros in D. 

Proof. Notice that the polynomial (x — b) q ~ 2 — g(x) has the same zeros as the 
polynomial (x — b) 2 ((x — b) q ~ 2 — g(x)) = (x — b) — (x — b) 2 g(x) on D for b ^ D. 
While the latter has the same zeros as the polynomial 1 — (x — b)g(x) on D. 
So the polynomial (x — b) q ~ 2 — g(x) has the same zeros as the polynomial 
1 — (x — b)g(x) on D. But the degree of 1 — (x — b)g(x) is not larger than k, 
so all the mentioned polynomials has at most k zeros in D. □ 

By this lemma, we easily obtain a new class of deep holes for GRSk(¥ q , D) 
besides the trivial ones defined by polynomials of degree k. 

Theorem 2.2. Let ¥ q be a finite field with q elements and C = GRSk{¥ q , D) 
the generalized Reed-Solomon code over ¥ q , where D ^ ¥ q is the evaluation 
set with cardinality n. Then for any b ^ D, polynomials f = a(x — b) q ~ 2 + 
/kfc-i(^) (a 7^ 0) define deep holes for GRSk(¥ q , D). 

Proof. Without loss of generality, we assume D C F* b = 0, and we may 
only consider the polynomial / = x q ~ 2 . By Lemma [2.11 for any polynomial 
g(x) G ¥ q [x] with deg(g(x)) ^ k — 1, the polynomial f — g has at most k zeros 
in D. So the error distance 

d(uf, C) = n — max I {zeros of f — oil ^ n — k. 

V } 1 9 eF 9 [x],deg( 9 Kfc-i 11 yjl 

On the other hand, for any S C D with \S\ = k, set 

9s = 1 , where a s = (-1) [[ 7 • 

-yes 

Then gs G ¥ q [x] has degree k — 1 and the polynomial 

1 - xg s (x) = a s Y[(x ~ 7) 

has k zeros in D. From the argument in the proof of Lemma \2. 11 the polyno- 
mial / — gs = x q ~ 2 — gs has k zeros in D. So the lower bound for d(uf, C) 
can be attained, i.e., 

d{uf, C) = n — k. 

In other words, the polynomial / = x q ~ 2 defines a deep hole for the generalized 
Reed-Solomon code C = GRS k (¥ q , D). □ 

In particular, if we take D = ¥*, then by Theorem 12.21 the polynomials 
/ = ax q ~ 2 + f^k_i(x) (a 7^ 0) define deep holes for the standard Reed-Solomon 
code GRSk(¥ q ,¥*), which were given by Wu and Hong [IT] . 
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3 A New class of Deep Holes for Special Reed- 
Solomon Codes over Finite Fields with Even 
Characteristic 

In this section, we consider Reed-Solomon codes GRSk(¥ q , D) over the finite 
field F q with even characteristic. And we give a new class of deep holes for 
some Reed-Solomon codes in this case. Li and Wan [5] characterized the deep 
holes defined by polynomials of degree k + 1 as follows. 

Let / = x k+1 — bx k + f<^k-i( x ) £ Fjx]. By Lemma 11.14 n — k — 1 ^ 
d(uf, C) ^ n — k. If / does not define a deep hole, i.e., d(uf, C) = n — k — 1, 
it is equivalent to that there exists g G ¥ q [x], deg(g) ^ k — 1 such that 

fc+i 

x k+1 - bx k + U k -i(x) - g(x) = Y[(x - a l3 ) 

3=1 

for a (k + l)-subset {a^, • • • , a ifc+1 } C D. It is also equivalent to 

a h H h a ik+1 = b 

for a (k + l)-subset {a^, • • • , C D. 

Following the notation in [6], for any subset D of F* let 

N(t, 6,D) = #{5CD|^x = | )) #S = t}. 

Then the polynomial / = x k+1 — bx k + f^k-i{%) defines a deep hole if and 
only if 

N(t,b,D) = 0. 

Taking D = F* or D = F* \ {1}, Li and Wan presented the explicit formula 
for N(t,b,D). 

Proposition 3.1 ([6]). Let ¥ q be a finite field with q elements. 
(i) For D = ¥*, 

N(t, 0, F!) = -( q ~ 1 ) + (-l)WJ 9 " 1 fqlV ~ 1 



Cii) ForL> = F*\{l} ; let 

where < t > p denotes the least non-negative residue oft modulo p, and S^t 
if < b > p is greater than < t > p and 5^t — otherwise. Then 



and 



N(t, b,D) = -r )+-R t - (-l)'M(t, t - 6). 



5 



Thanks to the explicit formulae, the following is immediate for the case 
that the characteristic p = 2 and q > 4. For D = ¥* or D = ¥* \ {1}, 

N(q- 3,0, D) = 0. 

Then d(v,f, C) = n — k. Therefore, we obtain a class of new deep holes for the 
Reed-Solomon code GRS q -4(¥ q , D). 

Theorem 3.2. Let ¥ q be a finite field with characteristic 2 and D = ¥* or 
D = ¥* \ {1}. If q > 4, then the vectors defined by polynomials ax q ~ 3 + 
f^k-i( x ) ( a 7^ 0) are deep holes for the Reed-Solomon code GRS q -i(¥ q , D). 

Wu and Hong conjectured that there are only two classes of deep holes for 
the standard Reed-Solomon code GRSk(¥ q , ¥*) defined by polynomials of the 
form ax k + f<^k-i(%) and ax q ~ 2 + f^ k _i(x) (a ^ 0). While in case for the special 
standard Reed-Solomon code GRS q ^4(¥ q , ¥*) over the finite field ¥ q with even 
characteristic, Theorem 13.21 gives a counterexample of the conjecture of Wu 
and Hong [IT] , i.e., deep holes defined by polynomials ax q ~ 3 + f^k-i(x) (a ^ 0). 

4 Deep Holes defined by Polynomials of De- 
gree k + 2 

In this section, we consider the extended Reed-Solomon code GRSk(¥ q , ¥ q ) 
over the finite field ¥ q of q > 5 elements with odd characteristic. For the 
polynomial of the form / = x k+2 — ax k+l — bx k + f<^k-i{x), by Lemma we 
have n — k — 2 d(v,f, C) ^ n — k. Then d(uf, C) ^ n — k — 1, i.e., such / does 
not define a deep hole, if and only if there exists some polynomial g G ¥ q [x] 
of degree deg(g) ^ k — 1 such that 

f-g = (x-'y)l[{x-P), 

pes 

for some S ^¥ q with cardinality k + 1, and some 7 G ¥ q . This implies that 
Hence we have the following lemma. 

Lemma 4.1. The polynomial f = x k+2 — ax k+1 — bx k + f^k~i{x) G ¥ q [x] can 
not define a deep hole if and only if there are some S C ¥ q with cardinality 
k + 1, and some 7 G ¥ q such that 
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From the two equalities, we have 

b=- /?i/?2-(a-X>)I> 

{h,0 2 }cs pes pes 

Hence, to search all such / that does not define a deep hole, we need to find 
all a G ¥ q and b G ¥ q such that the equation 

\ Xi ^ Xj, for all i ^ j, 
i-e., _^ 

\ Xf ^ X i; for all z ^ j 

has solutions in ¥ q . 

Indeed, we will show that the equation always has solutions for any a, b G 
¥ q . Let £ — k + 1, so we have 

Theorem 4.2. For any a, & 6 F 9 , /or all 3 ^ £ ^ q — 2, the equation 

f b = Ei^XX. + ELiXf-aELX, 
\ Xi ^ Xj, for alii ^ j 

has solutions in ¥ q . 

The proof we give is highly nontrivial, so we present the proof in the 
Appendix. 

Since deg(/) = k + 2 ^ n — 1 = q — 1, we only consider k ^ q — 3. By 
Theorem 14.2} we obtain the main result of this section. 

Theorem 4.3. Let ¥ q be a finite field of q > 5 elements and GRSk{¥ q ,¥ q ) 
the standard Reed- Solomon code. For all 2 ^ k ^ q — 3, the polynomials 
f = ux k+2 + ax k+1 + bx k + f^k-i(x) G ¥ q [x] (u G F*, a, b G ¥ q ) do not define 
deep holes. 



5 Conclusion 

The result of Section 4 supports the conjecture of Cheng and Murray [2] for 
extended Reed-Solomon codes. And it is easy to see that as the evaluation set 
D becomes small, there will be more deep holes for the Reed-Solomon code 
GRSk(¥ q , D). In particular, in Section 2 we have seen that there is a new class 
of deep holes whenever there is an element a G ¥ q \ D. For finite fields ¥ q 
with cardinality q > 5 and flCF, with cardinality q or q — 1, Li and Wan [B] 
proved that there is no deep hole of GRSk(¥ q , D) defined by polynomials of 
degree k + 1 when 2 < k < q — 3. In Section 4, we have seen that if the finite 
field ¥ q has odd characteristic, there is also no deep hole of GRSk{¥ q ,¥ q ) 
defined by polynomials of degree k + 2 when 2 ^ k ^ q — 3. Similarly, in this 
case, we can prove that there is also no deep hole of GRSk(¥ q , ¥*) defined by 
polynomials of degree k + 2 when 2 ^ k < q — 4. 
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A Appendix 



To complete this paper, we give the proof of Theorem 14.21 in this section. We 
only prove the theorem for the case that q = p > 2 a prime integer. In the 
proof, we also need to assume q ^ 257. For prime q < 257, we can use the 
computer to check it. 

For general prime power q, the proof is similar. Note that the reduction 
in Lemma [A. II is not valid when the characteristic p\(t + 1). But for small t 
(i.e., t < Ciq for some constant Ci), the method in the proof of Lemma [A. 31 
(and in the part (b) of the proof for Theorem 14.21) still works; for large t (i.e., 
t > C2q for some constant C2), using Lemma lA.21 it is enough to consider 
the complement set ¥ q \ {X±, ■ ■ ■ ,X t }. Together with the required version of 
Theorem I A. 71 (taking c = 1/2 and a proper e in Theorem 5.3 in [7]), we can 
finish the proof of Theorem 14.21 

First, we give some lemmas. Due to the next lemma, it is reduced to the 
case a = 0. 

Lemma A.l. For any a, b G ¥ q , the equation 

\ Xi ^ Xj, for all i ^ j 
has solutions in ¥ q , if and only if for any (3 G ¥ q , the equation 

\ X { ^ Xj, for all i ^ j 

has solutions in ¥ q . 

Proof. The necessity part holds obviously. 

For the other direction, for any a, b G ¥ q , taking j3 = 2 (t+i) + ^' su PP ose 
(xi, ■ ■ ■ ,x t ) G F* is a solution of the equation 

f P = Ei^<Kt X ^i + Yti=i X h 
[ J, / Xj , for all i ^ j. 

Set c = ^jTj-, then 

El<i<ja(^ + C )( X 3 + C ) + E!=l(^ + C ) 2 - a Yli=l(. X i + C ) 

= Ei^<ja XiX i + S=i x i + ((* + l ) c - a ) Yti=i x i - toe + t -^f 1 c 2 
= b. 



So (x% + c, • • • , x t + c) G F* is a solution of the equation 

b = J2l<H<j<Zt X i X 3 + Z)t=l X i ~ a Yfi=l X h 

Xi 7^ Xj , for all i 7^ j. 



□ 
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Lemma A. 2. For any S c¥ q with cardinality 2 ^ \S\ ^ q — 2, set S' = ¥ q \S. 
Then 

/^ + E^ 2 = E 

{/31,/3 2 }C5 {71,72}CS' 

Proof. We have 

= Z){0i,#2}cf, + E/3eF 9 

= (E {/ 9 lA }c5 + /5 2 ) + (E{ 7l , 72 } C S' 7l72 + E 7 gS' 7 2 ) 

+ E/3eS, 7 eS" ^7 _ 

= (E {/ 3 lA }c5 + E/3e 5 /5 2 ) + (E{ 7l , 72 } C S' 7i72 + E 7 e5' 7 2 ) 
+ (E 7GS '7)(-E 7 gs'7) 

= E{/3 1 ,/3 2 }C5 + E/3eS - E{ 71)72 }C5' 7l72- 

So 

E && + X> 2 = E 7i72. 

{/31,/3 2 }C5 {71,72}CS' 

□ 

By this lemma, it is enough to consider the equation 

\ Xi ^ X^ foralH^j. 
Lemma A. 3. For any b G F g and 2 ^ t ^ 2=-, i/ie equation 

{ h = Ei<i<ja^^' 

\ X 7^ Xj, /or a/H 7^ j 

/ias solutions in ¥ q . 

Proof. We prove the statement by induction on t. 
For t = 2, 3, one can easily check it. 
Now we assume that the result is true for t ^ 3. 
Then for t + 1, by induction hypothesis, suppose the equation 

E ^ = fo 

has a solution (xi, • • • , Xt) G F* such that Xj 7^ Xj for any i ^ j. 

If Xj 7^ for all 1 ^ i ^ £, then (0, xi, • • • , x t ) G F^ +1 is a solution of the 
equation 

\ X 7^ X J; for alH^j. 

Then we finish the induction procedure. 

Otherwise, without loss of generality, we assume X\ = 0. We want to 
find some x' t G ¥ q \ {x\, ■ ■ ■ ,x t } and x G ¥ q \ {xi, • • • , x t _i,xj} such that 
(xi, • • • , x t -\,x' t , x) forms a solution of the following equation 

E x * x i = b - 

l<i<7<t+l 

10 



Denote a = x± + ■ ■ ■ + x t . Because permutations of (x±, ■ ■ ■ ,Xt) are also 
solutions of the equation and t ^ 3, we may assume x t 7^ a. Thus 

« 2 -2& = EL*?, 

a = x 1 + • • • + x t . 
It induces 

a 2 - 2x' t (x t - x' t ) - (x t - x' t f + x 2 - 2b = x 2 + (x' t ) 2 + x 2 , 

a — (x t — x' t ) + x = Xi + ■ ■ ■ + x' t + x. 

To find solutions of the equation 

Xi 7^ Xj, for all i ^ j 

in F g , it suffices to show the existences of x' t G ¥ q \ {xi, ■ ■ ■ ,x t } and x G 
¥ q \ {xi, • • • , x t -i,x' t } which satisfy 

(a — (x t — xj) + x) 2 = a 2 — 2x' t (x t — x' t ) — (x t — x' t ) 2 + x 2 . 

That is, the solution 

(x t — x',)(x t — a) _ 

x = — ^ - G F* 

Xt — x t — a 

satisfies 

xGF*\{x 2 ,-- - 

If 

(x t — x' f )(x t — a) , . 

x = ; = Xi, tor some % = 2, • • • , t — 1, 

x t — :rj — a 

then 

, (x t -Xi)(x t -a) 
x t = . 

— — CL 

if 

_ (x^ - x' t )(x t - a) _ , 
X — — x t , 

x t — x t — a 

then it has at most two solutions for x' t , say c±, c 2 . So, we can pick any element 
from 

T, \ fa, ( * ~ * )( * = ■ ■ ■ ■ ■ ( * = X - MX < — ,ci,ca} 

x 4 - a; 2 - a x t - x t _i - a 

for xj. And under the condition 

g-l>*-l + i-2 + 2, i.e., 

the equation 



Xj 7^ for all i ^ j, 

always has solutions in F g . □ 
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we calculate a sum of quadratic character of a finite field. 

Lemma A. 4. Let q be an odd prime power and ¥ q a finite field of q elements. 
For any c G ¥ q , we have 



Y Viz 2 + c) 
xe¥ q 



5-1, */c = ; 

3, i/77(-l) = 77(c) = -1, 

f, otherwise. 



where r\ is the quadratic character of¥ q , i.e., 

{1, if x is a square, 
— 1, if x is not a square, 
0, ifx = 0. 

Proof. The statement holds obviously for c = 0. 

Now we assume c 7^ 0, consider the quadratic equation 

2 1 2 
x +c=y , 

namely, 

(y-x)(y + x) = c. 
It is easy to see that the equation has (q — 1) solutions 

'b-c/b b + c/b\ 

2 ' 2 J 1 5 

If 77( — 1) = i](c) = —1, then — c is a square. So there are two solutions for the 
equation x 2 + c = 0, this means that 



q 



1-2 



-(9- 



1 - 2 



) + + 



For other cases, with the same argument, we finish the rests of this lemma. □ 

By this lemma, we can compute the number of squares in a finite field 
whose images under a fixed affine map are still squares. It is interesting that 
squares are about one half elements in a finite field, and about one half squares 
are still squares under the action of an affine map. 

Corollary A. 5. Let q be an odd prime power, and ¥ q a finite field of q ele- 
ments. For any a,c G F* ; we have 



A = #{x G ¥ q I both x and ax + c are squares in ¥ q } ^ 



q 
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Proof. By Lemma \AA\ we have 



r\ (ax 2 + c) 



ac: 



3, if r}(-l) = 77(00) = -1, 
1, otherwise. 



Let m = #{x G F g | ax 2 + c is a square in ¥ q }, then 



r](ax 2 + 



x€¥„ 



\m — 2 — (g — m)\, if t](—ac) = —1, 
\m — (q — m)\, if r](—ac) ^ —1. 



Comparing the above two equalities, it follows that 

m ^ . 



Since A 



m+(??(c)+l)/2 - m 



^ y, we complete the proof. 



□ 



If we only consider | < t ^ ^— ^, taking c = 1/2 and e = ^^1377 — ^ — | 

in the Theorem 5.3 in [7] where p is the characteristic of the finite field ¥ q , 
then we have 

Proposition A. 6. If q ^ 257 and | < t ^ t/ien /or an?/ a, G ¥ q , the 
system of equations 

Xj ^ Xj, for alii 
has solutions in ¥ q . 

Theorem A. 7. If q ^ 257 and | < t < y ; i/ien for any a, G F 9 , i/ie system 
of equations 

a = Y?i=i x h 

Xi ^ Xj, for alii 
has solutions in ¥ q . 

Proof. The statement is equivalent to that there exist pairwise distinct a 1; • ■ ■ , a t G 
¥ q such that 

t 

1 + ax + bx 2 = — otjX) mod x 3 . 
i=i 

By Proposition IA.61 it suffices to prove that if ^ t < y, for any 
a, b G F g , there exist pairwise distinct a%, ■ ■ ■ , at G ¥ q such that 



1 + ax + ox 2 = — ftj-x) mod x 3 . 
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So it is equivalent to 

1 - x 9 " 1 1 - x 9 " 1 



mod x 



1 + ax + bx 2 YT j=1 (l - aijx) 
Set 

{/?!, • • • , /3 9 _ t } = ¥ q \ {«!,••• , ait}. 
Then it is equivalent to the existence of distinct (3\, ■ ■ ■ , (3 q -t G ¥ q satisfying 

1 _ x g-i %± 

= - (3jx) mod x 3 . 



1 + ax + bx 2 



□ 



By Proposition \A.6\ when | < g — t ^ ^g - , i.e., 

q + 1 60 

< -=r, 

2 7 

the required ■ ■ • exist. 

Now we prove Theorem 14.21 
Proof of Theorem 14.21 

(a) By Lemmas IA.1HA.3} when ^ ^ t ^ q - 2, for any a,b e ¥ q , the 
equation 

b = J2i^i<j^t x i x j + Y!i=i X f - a Y!i=i x h 

Xi 7^ Xj, for all i ^ j 

has solutions in ¥ q . 

(b) For 3 ^ t < ^p-, we prove the statement by induction on t. 
If t = 3, first we fix an element X\ G F g such that 

2x\ - 36 ^ 0. 

Now we need to find i 2 £ \ {^1} such that the equation on X 

X 2 + (xi + x 2 )X + x\ + x\ + xix 2 -6 = 

has a solution x 3 G F g \ {xi, x 2 , — Xi — x 2 }. 

It is well-known that the above equation on X has solutions if and only if 
the discriminant 

A = (xi + x 2 ) 2 — A(x\ + x 2 + xix 2 — b) 
= -3x1 ~ 2x i x 2 - 3x? + 46 

is a square in F„. 
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Note that the characteristic p 7^ 3, so the discriminant 



Denote 

#2 (A) = {^2 G Fq \ {si} | the induced A is a square}. 



Note that £ 2 ^ Xi, by Corollary IA.5| we have 

W A)|>( 2 (i^-l) + l)-l = i^. 

Since the equation on x 2 

X 2 + (xi + x 2 )X + x\ + x\ + X\X 2 — 6 = 

gives at most two solutions x^\\x\^ for each x = X{ (i = 1,2) or c^,^ 2 ) for 
x = —x\ — x 2 , respectively. 

From the argument above, we can pick any element from the set 

x 2 (A)\{xS 1) ,xS 2) ,x( 1) ,xf,c«,c( 2 )} 

for x 2 . And this can be done under the assumption 

6 < — — , i.e., g > 17. 
Now we assume that the result is true for t ^ 3. 

Then for t + 1, by induction hypothesis, we may assume (xi, ■ ■ • , x t ) € F* 
forms a solution of the equation 

Xi 7^ Xj, for all i 7^ j, 
and 

a = y^ j x i ^ 0. 

i=i 

Then 

The same as the proof in Lemma IA.3[ if X{ 7^ for all 1 ^ i ^ t, then 
(xi, ■ ■ ■ , x t , 0) G F* forms a solution of the equation 



Xi ^ Xj, for all i 7^ j, 

Otherwise, assume Xt = 0. We replace Xt by a proper element x£ G F* to 
induce an element x G ¥ q such that (xi, ■ ■ ■ , x' t , x) G F* +1 is a solution of the 
equation 

Xj 7^ X,-, for all i ^ j, 
15 



and 

t-i 

Xi + x' t + x 7^ 0. 

i=l 

Firstly, we pick x' t e F g \ {xi, • • • , which will be determined. Then by the 
induction hypothesis, 

| 26-a 2 + (xJ) 2 + x 2 = Et;^ 2 + (^) 2 + ^ 2 > 
\ a + x' t + x = xi + ■ ■ ■ + x' t + x. 

We want to find some x' t G ¥ q \ {x±, ■ ■ ■ ,x t , —a} such that the equation on x 

(a + x' t + x) 2 = a 2 - (x' t ) 2 - x 2 
gives a solution i£F,\ {xi, ■ ■ ■ ,x' t , — (YllZi x i + x 't)}- The equation is 

x 2 + (a + x' t )x + x' t (a + x' t ) = 0. 

Here, we see that why we require x' t ^ —a at the beginning. Indeed, if x' t = —a, 
then the equation above is reduced to 

x 2 = 0, 

which has only zero solution x — 0. Then 

i-i 

^^^^^ x 2 I I x — 0j 

i=l 

which goes against our requirement in the induction. 

Similarly as the proof for the case t = 3, the above equation on x has 
solutions if and only if the discriminant 

A = (a + x't) 2 - Ax' t (a + x't) 
= -3(x' t ) 2 - 2ax' t + a 2 

is a square in ¥ g . 

Note that the characteristic p ^ 3, so the discriminant 

A = -Hx' t + I) 2 + ^. 

Denote 

x't(A) = {x't G F* | the induced A is a square}. 
Note that x' t ^ 0, by Corollary \A.5\ we have 

W(A)|>( 2 (i^-l) + l)-l = i^. 

Since the equation on x' t 

x 2 + (a + x' t )x + x' t (a + x' t ) = 
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gives at most two solutions xf'^xf' for each x = X{ (i = 1,2, ■ ■ • ,t — 1) or 
c ( 1 ) ) c (2) f or x — —(J^lZi x i + x 't) or ( x t)^i i. x 't)^ f° r ^ = x t-> respectively. 
From the argument above, we pick any element x' t from the set 

r'(\\\ in ■■■ r. r (1) r (2) ••• r (1) r (2) (r'V 1 ) (r'V 2 ) A 1 ** -n\ 

and finish the induction. And under the assumption 

o — 5 o — ll 

3t + 3<- L - — , i.e., t < 



6 



such an x' t always exists. 
Since 

q q — 11 



7 6 

as o ^ 257, by combining (a), (b) and Theorem IA.7[ we complete the proof 
of Theorem 14.21 □ 
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